chore: add Dependabot configuration for automated dependency updates

[johnborges]

This pull request introduces automated dependency management to the repository by adding a Dependabot configuration and updating the documentation to explain the new process. The main changes include the creation of a .github/dependabot.yml file to schedule and group dependency updates across multiple ecosystems, and a new section in the README.md describing how Dependabot is set up and managed.

Dependabot configuration and documentation:

• Added a comprehensive .github/dependabot.yml file to automate dependency updates for npm, Gradle, Swift, and GitHub Actions, including scheduling, grouping related dependencies, and customizing commit messages.
• Updated README.md to document the use of Dependabot, detailing which ecosystems are covered, update frequency, grouping strategy, and the manual review policy for dependency update pull requests.

[Copilot]

Pull request overview

This PR introduces Dependabot-driven automated dependency update PRs for the repository and documents the update policy/workflows in the README.

Changes:

• Added a .github/dependabot.yml configuring update schedules, grouping, and commit message prefixes across npm, Gradle, Swift, and GitHub Actions.
• Updated README.md with a new “Dependency Updates” section describing covered ecosystems, cadence, grouping, and manual review policy.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
README.md	Documents the new Dependabot setup and dependency update policy for contributors.
.github/dependabot.yml	Defines automated dependency update configuration (schedules, grouping, commit messages) for multiple ecosystems.

Suppressed comments (5)

.github/dependabot.yml:40

• Dependabot's schedule.timezone expects a tz database (IANA) name (e.g., Etc/UTC). Using UTC here can cause config validation errors and prevent updates from running.

      timezone: UTC

.github/dependabot.yml:63

• Dependabot's schedule.timezone expects a tz database (IANA) name (e.g., Etc/UTC). Using UTC here can cause config validation errors and prevent updates from running.

      timezone: UTC

.github/dependabot.yml:76

• Dependabot's schedule.timezone expects a tz database (IANA) name (e.g., Etc/UTC). Using UTC here can cause config validation errors and prevent updates from running.

      timezone: UTC

.github/dependabot.yml:89

• Dependabot's schedule.timezone expects a tz database (IANA) name (e.g., Etc/UTC). Using UTC here can cause config validation errors and prevent updates from running.

      timezone: UTC

.github/dependabot.yml:100

• Dependabot's schedule.timezone expects a tz database (IANA) name (e.g., Etc/UTC). Using UTC here can cause config validation errors and prevent updates from running.

      timezone: UTC

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

Suppressed comments (5)

.github/dependabot.yml:40

• schedule.timezone should be an IANA timezone string. UTC is not a valid IANA name for Dependabot schedules; use Etc/UTC (as used in the first update block) to avoid config validation errors and ensure schedules run.

      timezone: UTC

.github/dependabot.yml:63

• schedule.timezone should be an IANA timezone string. UTC is not a valid IANA name for Dependabot schedules; use Etc/UTC to avoid config validation errors and ensure schedules run.

      timezone: UTC

.github/dependabot.yml:89

• schedule.timezone should be an IANA timezone string. UTC is not a valid IANA name for Dependabot schedules; use Etc/UTC to avoid config validation errors and ensure schedules run.

      timezone: UTC

.github/dependabot.yml:76

• schedule.timezone should be an IANA timezone string. UTC is not a valid IANA name for Dependabot schedules; use Etc/UTC to avoid config validation errors and ensure schedules run.

      timezone: UTC

.github/dependabot.yml:100

• schedule.timezone should be an IANA timezone string. UTC is not a valid IANA name for Dependabot schedules; use Etc/UTC to avoid config validation errors and ensure schedules run.

      timezone: UTC